Speakers at the Enterprise Risk - Security Management Conference

Mark Bower
Mark is an Electrical Engineer, with specialization in Cryptography and Security, PKI, Identity Management, mission critical systems, and global scale enterprise software with 18 years experience, and has patented designs in the field of secure financial data communications and bandwidth optimization.

Joe Burkard is currently the Director of Global IT Security and Risk Management at Baxter International. In this role Joe is responsible for the Global IT Security strategy, policies and governance; Continuity and application recovery; and IT Operations Risk assessment, risk management and reporting. He has over 15 years experience as an Information Technology Risk Consultant, IT Auditor and Information Security practitioner, and he has worked with multiple industries and organizations including Arthur Andersen LLP, Protiviti Inc. and Miller Brewing. Joe is a CISA, CISM and CISSP and is currently pursuing his MBA at the Lake Forest Graduate School of Management. He has previously been a featured speaker at the ISACA 2004 CACS and 2006 Security Management conferences.

Tim Burke

Tim Burke has over 18 years of experience in the field of information security, risk management and information technology.  Tim retired from the U.S. Army in 2002 where he "cut his teeth" learning Information Security working for the Defense Threat Reduction Agency; and, since is his retirement has held Information Security Management positions for two large companies.  Today he manages Information Security, Disaster Recovery, Enterprise Risk Management/Sarbanes-Oxley processes for IT and Electronic Record Retention/Archiving for the American Division of a large global insurance company.  Tim holds the following certificates: Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM).

Daniel M. Harris
Danny is with Aon's Information Security Services group, and is instrumental in the development and refinement of corporate security policies, standards, and procedures. Specializing in security awareness training, Danny is responsible for the delivery of key security awareness training for the organization, as well as for the development, implementation, and maintenance of the corporate technical information security website. Danny's involvement also includes security audits, security vulnerability and risk assessments on Aon's Internet connections, E-commerce sites, and internal systems. Additionally, he functions as a consulting engineer and architect for secure network systems, with extensive involvement in the deployment of E-Mail content filtering and virus scanning at Aon. Danny is a key member of Aon's Information Security Incident Response Team, where he assists with incident handling. He also evaluates and recommends security products for Aon. Danny also teaches in the Computer Security and Forensics Investigation program at Wilbur Wright College in Chicago and has been an instructor with the SANS Institute for five years.

With over twelve years of information security experience in various technical sales, consulting, and product marketing roles, Sandy drives BigFix's product marketing strategy. Before joining BigFix, she held senior product marketing responsibilities at Blue Coat Systems, Vormetric, Nevis Networks and SenSage. Her background also includes hands-on technical risk mitigation as she led field level engineering support for Cybertrust’s Western sales team and was responsible for assessing customer environments against the TruSecure certification criteria. She began her career managing network firewalls for UUNET – one of the largest ISPs in the world. Combining her hands-on experience with a real world business perspective, Sandy can provide salient insights on optimizing infrastructure and security investments. In addition to the CISSP credential, she holds a BA degree in Political Science from the University of Delaware and an MA degree in Political Science from UC, Santa Barbara.

Alex Holden
Alex Holden, CISSP, Chief Information Security Officer, Robert W. Baird & Co., Inc.

Min Ju
Min Ju is a Security Strategist for Symantec Corporation.  His responsibilities range from security strategy, holistic solutions, architecture, education and trusted advisor to security executives, senior management and engineers of large enterprises.  Min has over 16 years of diverse experience in information security, web architecture, infrastructure, networking and development environments.  Min has created several utilities and scripts that have shown enough value to get included with the Symantec Endpoint Protection build.  For his efforts and contribution Min was bestowed an Innovation Award at the 2008 SE Summit.  Min is a very active member of the global security community in Symantec and in his local geography.  He established the first Midwest Endpoint Security User Group.  Prior to Symantec, Min worked as the Head of Information Security and Security Architect for CDW Corporation, as an ethical hacking team lead, vulnerability researcher and web architect at Allstate Insurance and a senior consultant at Arthur Andersen in the application integration and Internet teams. Min has spoken previously at CAMP IT and many other industry events. Min holds a M.B.A. from the Keller Graduate School of Management, B.S. from DeVry Institute of Technology, and numerous certifications including GREM, GPEN, CEH, CISSP, CISA, Security+, Linux+, MCSE and MCSA.  In his spare time he enjoys his family, barbeques and getting an adrenaline rush from amateur auto racing.

Andrew C. Maychruk

Andrew Reeder

Andy Reeder serves as the Director, HIPAA Privacy and Security at Rush University Medical Center, a major academic healthcare center in Chicago.  In this role, Andy provides leadership and planning to achieve regulatory compliance around information protection requirements.  He is also very involved in the implementation of privacy and security controls including the development and implementation of policies and procedures, and the design of technical controls for major enterprise applications.  Andy has served as a leader in Chicago-based information security services for several years and has previously worked as the Director, Information Security for Central DuPage Hospital and as a Senior Manager with the Security Services practice at Deloitte and Touche.  Andy holds the CISSP, CISA, and CISM certifications.

Ken Rowe
Ken Rowe provides leadership as the Chief Security Officer for enterprise systems within the University of Illinois system. With almost 30 years of experience in Information Security, his career includes past positions at the National Security Agency (NSA), the National Center for Supercomputing Applications (NCSA), Cisco Systems, Science Applications International Corporation (SAIC), and Grant Thornton LLP. Mr. Rowe has been involved extensively with technical research in network security, security assurance, and software-based cryptography. He is just as comfortable at the Governance level with Enterprise Risk Management (ERM), security policies, standards and operations, and a variety of compliance areas including FERPA, FFIEC, GLBA, HIPAA, ISO 27001, PCI DSS and SOX. Mr. Rowe is a member of the National Visiting Committee for the NSF-sponsored Center for Systems Security and Information Assurance (CSSIA), the Competition Industry Advisory Board for the Midwest Collegiate Cyber Defense Competition (CCDC), and the InfraGard Springfield Members Alliance.